Why even add a username? I usually don't add them unless they are necessary (in cases where a user's profile, other information needs a pretty url)
Why even add a username? I usually don't add them unless they are necessary (in cases where a user's profile, other information needs a pretty url)
Particularly, services which insist on you logging in with a username, but can send you your username by email if/when you forget it, should suffer horrid flaming death.
I mean, I understand that one could make a case for such a high-value target as Steam to not allow email/password pairs considering the high rate of password reuse. But I have 2FA enabled as well for heaven's sake. And I cannot believe that simply insisting on username/password pairs instead is better enough to justify it, compared to real best practice password policies. I mean jeez, how many username are just the pre-@ portion of the email address anyway??